@geekmidas/constructs 10.0.0-alpha.4 → 10.0.0-alpha.40

package/dist/adaptors/aws.cjs

@@ -1,22 +1,24 @@
-const require_chunk = require('../chunk-DWy1uDak.cjs');
-require('../construct-interface-BfjcOD_E.cjs');
-require('../Construct-CyS3RpTL.cjs');
-const require_functions = require('../functions-DJJA7VGc.cjs');
-require('../clone-Dy0cR2SZ.cjs');
-const require_Endpoint = require('../Endpoint-DODn1RhN.cjs');
-const require_surfaceEnv = require('../surfaceEnv-BFXEms2f.cjs');
-const require_lazyAccessors = require('../lazyAccessors-e3j2oE2m.cjs');
-const require_processAudits = require('../processAudits-CGqttuXm.cjs');
-const __geekmidas_errors = require_chunk.__toESM(require("@geekmidas/errors"));
-const __geekmidas_services = require_chunk.__toESM(require("@geekmidas/services"));
-const __middy_core = require_chunk.__toESM(require("@middy/core"));
-const __geekmidas_audit = require_chunk.__toESM(require("@geekmidas/audit"));
-const __geekmidas_audit_kysely = require_chunk.__toESM(require("@geekmidas/audit/kysely"));
-const __geekmidas_db_rls = require_chunk.__toESM(require("@geekmidas/db/rls"));
-const qs = require_chunk.__toESM(require("qs"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_rolldown_runtime = require("../rolldown-runtime-y5ARvAq5.cjs");
+const require_functions = require("../functions-ZH60FE7H.cjs");
+const require_Endpoint = require("../Endpoint-D1L9qu5C.cjs");
+const require_surfaceEnv = require("../surfaceEnv-CNimK76p.cjs");
+const require_lazyAccessors = require("../lazyAccessors-hJKGv8Ay.cjs");
+const require_processAudits = require("../processAudits-D_2W5x8k.cjs");
+let _geekmidas_errors = require("@geekmidas/errors");
+let _geekmidas_db_rls = require("@geekmidas/db/rls");
+let _geekmidas_services = require("@geekmidas/services");
+let qs = require("qs");
+qs = require_rolldown_runtime.__toESM(qs, 1);
+let _geekmidas_audit = require("@geekmidas/audit");
+let _middy_core = require("@middy/core");
+_middy_core = require_rolldown_runtime.__toESM(_middy_core, 1);
+let _geekmidas_audit_kysely = require("@geekmidas/audit/kysely");
+let _geekmidas_events_sns = require("@geekmidas/events/sns");
 //#region src/functions/FunctionExecutionWrapper.ts
 var FunctionExecutionWrapper = class {
+	envParser;
+	fn;
 	constructor(envParser, fn) {
 		this.envParser = envParser;
 		this.fn = fn;
@@ -26,25 +28,22 @@ var FunctionExecutionWrapper = class {
 		return this._logger || this.fn.logger;
 	}
 	get serviceDiscovery() {
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-		return serviceDiscovery;
+		return _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
 	}
 	getServices() {
 		return this.serviceDiscovery.register(this.fn.services);
 	}
 	async getDatabase() {
-		if (!this.fn.databaseService) return void 0;
-		const services = await this.serviceDiscovery.register([this.fn.databaseService]);
-		return services[this.fn.databaseService.serviceName];
+		if (!this.fn.databaseService) return;
+		return (await this.serviceDiscovery.register([this.fn.databaseService]))[this.fn.databaseService.serviceName];
 	}
 	/**
 	* Get the audit storage service if configured.
 	* Returns undefined if no auditor storage is configured.
 	*/
 	async getAuditStorage() {
-		if (!this.fn.auditorStorageService) return void 0;
-		const services = await this.serviceDiscovery.register([this.fn.auditorStorageService]);
-		return services[this.fn.auditorStorageService.serviceName];
+		if (!this.fn.auditorStorageService) return;
+		return (await this.serviceDiscovery.register([this.fn.auditorStorageService]))[this.fn.auditorStorageService.serviceName];
 	}
 	/**
 	* Create an auditor instance for the function.
@@ -52,8 +51,8 @@ var FunctionExecutionWrapper = class {
 	*/
 	async createAuditor() {
 		const storage = await this.getAuditStorage();
-		if (!storage) return void 0;
-		return new __geekmidas_audit.DefaultAuditor({
+		if (!storage) return;
+		return new _geekmidas_audit.DefaultAuditor({
 			actor: {
 				id: "system",
 				type: "system"
@@ -73,52 +72,45 @@ var FunctionExecutionWrapper = class {
 	async executeWithAudit(handler) {
 		const auditor = await this.createAuditor();
 		const storage = await this.getAuditStorage();
-		if (!auditor || !storage) {
-			const db$1 = await this.getDatabase();
-			return handler({ db: db$1 });
-		}
+		if (!auditor || !storage) return handler({ db: await this.getDatabase() });
 		const storageDb = storage.getDatabase?.();
 		const databaseServiceName = this.fn.databaseService?.serviceName;
 		const auditDbServiceName = this.fn.auditorStorageService?.serviceName;
-		if (storageDb && databaseServiceName && auditDbServiceName) return (0, __geekmidas_audit_kysely.withAuditableTransaction)(storageDb, auditor, async (trx) => {
-			const response$1 = await handler({
+		if (storageDb && databaseServiceName && auditDbServiceName) return (0, _geekmidas_audit_kysely.withAuditableTransaction)(storageDb, auditor, async (trx) => {
+			return await handler({
 				auditor,
 				db: trx
 			});
-			return response$1;
 		});
-		const db = await this.getDatabase();
 		const response = await handler({
 			auditor,
-			db
+			db: await this.getDatabase()
 		});
 		await auditor.flush();
 		return response;
 	}
 	async getFunctionInput(event) {
-		const parsedInput = await require_functions.FunctionBuilder.parseComposableStandardSchema(event, this.fn.input);
-		return parsedInput;
+		return await require_functions.FunctionBuilder.parseComposableStandardSchema(event, this.fn.input);
 	}
 	async publishEvents(response) {
-		await require_lazyAccessors.publishEvents(this.logger, this.serviceDiscovery, this.fn.events, response, this.fn.publisherService);
+		await require_functions.publishEvents(this.logger, this.serviceDiscovery, this.fn.events, response);
 	}
 	async parseComposableStandardSchema(data, schema) {
 		return require_functions.FunctionBuilder.parseComposableStandardSchema(data, schema);
 	}
 };
-
 //#endregion
 //#region src/functions/AWSLambdaFunction.ts
 var AWSLambdaFunction = class extends FunctionExecutionWrapper {
+	fn;
 	constructor(envParser, fn) {
 		super(envParser, fn);
 		this.fn = fn;
 	}
 	error() {
 		return { onError: (req) => {
-			const logger = req.event?.logger || this.fn.logger;
-			logger.error(req.error || {}, "Error processing function");
-			throw (0, __geekmidas_errors.wrapError)(req.error);
+			(req.event?.logger || this.fn.logger).error(req.error || {}, "Error processing function");
+			throw (0, _geekmidas_errors.wrapError)(req.error);
 		} };
 	}
 	baseInput() {
@@ -193,17 +185,16 @@ var AWSLambdaFunction = class extends FunctionExecutionWrapper {
 			db: event.db,
 			auditor: event.auditor
 		});
-		const output = await this.fn.parseOutput(result);
-		return output;
+		return await this.fn.parseOutput(result);
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		const chain = (0, __middy_core.default)(handler).use(this.loggerMiddleware()).use(this.baseInput()).use(this.error()).use(this.services()).use(this.database()).use(this.auditor()).use(this.input()).use(this.events());
+		const chain = (0, _middy_core.default)(handler).use(this.loggerMiddleware()).use(this.baseInput()).use(this.error()).use(this.services()).use(this.database()).use(this.auditor()).use(this.input()).use(this.events());
 		const wrappedHandler = async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.fn.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
 				startTime
@@ -212,7 +203,6 @@ var AWSLambdaFunction = class extends FunctionExecutionWrapper {
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 //#region src/crons/AWSScheduledFunction.ts
 /**
@@ -246,11 +236,11 @@ var AWSScheduledFunction = class extends AWSLambdaFunction {
 		super(envParser, cron);
 	}
 };
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayEndpointAdaptor.ts
-var import_lodash = require_chunk.__toESM(require_Endpoint.require_lodash(), 1);
+var import_lodash_set = /* @__PURE__ */ require_rolldown_runtime.__toESM(require_Endpoint.require_lodash_set(), 1);
 var AmazonApiGatewayEndpoint = class {
+	endpoint;
 	options;
 	/**
 	* The parser this adaptor discovers services with.
@@ -270,7 +260,7 @@ var AmazonApiGatewayEndpoint = class {
 	error() {
 		return { onError: (req) => {
 			(req.event.logger || this.endpoint.logger).error(req.error || {}, "Error processing request");
-			const wrappedError = (0, __geekmidas_errors.wrapError)(req.error);
+			const wrappedError = (0, _geekmidas_errors.wrapError)(req.error);
 			req.response = {
 				statusCode: wrappedError.statusCode,
 				body: wrappedError.body
@@ -288,8 +278,7 @@ var AmazonApiGatewayEndpoint = class {
 	static decodeBody(body, isBase64Encoded, contentType) {
 		if (!body) return void 0;
 		const raw = isBase64Encoded ? Buffer.from(body, "base64").toString("utf-8") : body;
-		const isJson = !contentType || contentType.toLowerCase().includes("application/json");
-		if (isJson) return JSON.parse(raw);
+		if (!contentType || contentType.toLowerCase().includes("application/json")) return JSON.parse(raw);
 		return raw;
 	}
 	getCookies(e) {
@@ -303,13 +292,13 @@ var AmazonApiGatewayEndpoint = class {
 				const headers = req.event.headers;
 				const header = require_Endpoint.Endpoint.createHeaders(headers);
 				const cookie = this.getCookies(req.event);
-				(0, import_lodash.default)(req.event, "body", await this.endpoint.parseInput(body, "body"));
-				(0, import_lodash.default)(req.event, "query", await this.endpoint.parseInput(query, "query"));
-				(0, import_lodash.default)(req.event, "params", await this.endpoint.parseInput(params, "params"));
-				(0, import_lodash.default)(req.event, "header", header);
-				(0, import_lodash.default)(req.event, "cookie", cookie);
+				(0, import_lodash_set.default)(req.event, "body", await this.endpoint.parseInput(body, "body"));
+				(0, import_lodash_set.default)(req.event, "query", await this.endpoint.parseInput(query, "query"));
+				(0, import_lodash_set.default)(req.event, "params", await this.endpoint.parseInput(params, "params"));
+				(0, import_lodash_set.default)(req.event, "header", header);
+				(0, import_lodash_set.default)(req.event, "cookie", cookie);
 			} catch (error) {
-				if (error && typeof error === "object" && Array.isArray(error)) throw new __geekmidas_errors.UnprocessableEntityError("Validation failed", error);
+				if (error && typeof error === "object" && Array.isArray(error)) throw new _geekmidas_errors.UnprocessableEntityError("Validation failed", error);
 				throw error;
 			}
 		} };
@@ -326,9 +315,8 @@ var AmazonApiGatewayEndpoint = class {
 	}
 	services() {
 		return { before: async (req) => {
-			const _logger = req.event.logger;
-			const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-			const services = await serviceDiscovery.register(this.endpoint.services);
+			req.event.logger;
+			const services = await _geekmidas_services.ServiceDiscovery.getInstance(this.envParser).register(this.endpoint.services);
 			req.event.services = services;
 		} };
 	}
@@ -339,7 +327,7 @@ var AmazonApiGatewayEndpoint = class {
 			const header = req.event.header;
 			const cookie = req.event.cookie;
 			const session = req.event.session;
-			const isAuthorized = await this.endpoint.authorize({
+			if (!await this.endpoint.authorize({
 				header,
 				cookie,
 				services,
@@ -349,19 +337,17 @@ var AmazonApiGatewayEndpoint = class {
 				body: req.event.body,
 				query: req.event.query,
 				params: req.event.params
-			});
-			if (!isAuthorized) {
+			})) {
 				logger.warn("Forbidden access attempt");
-				throw new __geekmidas_errors.ForbiddenError("Forbidden access to the endpoint", "You do not have permission to access this resource.");
+				throw new _geekmidas_errors.ForbiddenError("Forbidden access to the endpoint", "You do not have permission to access this resource.");
 			}
 		} };
 	}
 	database() {
 		return { before: async (req) => {
 			if (!this.endpoint.databaseService) return;
-			const _logger = req.event.logger;
-			const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-			const db = await serviceDiscovery.register([this.endpoint.databaseService]).then((s) => s[this.endpoint.databaseService?.serviceName]);
+			req.event.logger;
+			const db = await _geekmidas_services.ServiceDiscovery.getInstance(this.envParser).register([this.endpoint.databaseService]).then((s) => s[this.endpoint.databaseService?.serviceName]);
 			req.event.db = db;
 		} };
 	}
@@ -386,15 +372,15 @@ var AmazonApiGatewayEndpoint = class {
 			const statusCode = req.response?.statusCode ?? this.endpoint.status;
 			if (require_Endpoint.Endpoint.isSuccessStatus(statusCode)) {
 				const logger = event.logger;
-				const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-				await require_lazyAccessors.publishConstructEvents(this.endpoint, response, serviceDiscovery, logger);
+				const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+				await require_functions.publishConstructEvents(this.endpoint, response, serviceDiscovery, logger);
 			}
 		} };
 	}
 	async _handler(event) {
 		const input = this.endpoint.refineInput(event);
 		const logger = event.logger;
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+		const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
 		const auditContext = await require_processAudits.createAuditContext(this.endpoint, serviceDiscovery, logger, {
 			session: event.session,
 			header: event.header,
@@ -412,9 +398,8 @@ var AmazonApiGatewayEndpoint = class {
 			cookie: event.cookie,
 			logger
 		}) : void 0;
-		const result = await require_processAudits.executeWithAuditTransaction(auditContext, async (auditor) => {
-			const sameDatabase = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === this.endpoint.databaseService?.serviceName;
-			const baseDb = sameDatabase ? auditor?.getTransaction?.() ?? rawDb : rawDb;
+		const { output, metadata } = await require_processAudits.executeWithAuditTransaction(auditContext, async (auditor) => {
+			const baseDb = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === this.endpoint.databaseService?.serviceName ? auditor?.getTransaction?.() ?? rawDb : rawDb;
 			const executeHandler = async (db) => {
 				const responseBuilder = new require_Endpoint.ResponseBuilder();
 				const response = await this.endpoint.handler({
@@ -428,33 +413,31 @@ var AmazonApiGatewayEndpoint = class {
 					...input
 				}, responseBuilder);
 				let data = response;
-				let metadata$1 = responseBuilder.getMetadata();
+				let metadata = responseBuilder.getMetadata();
 				if (require_Endpoint.Endpoint.hasMetadata(response)) {
 					data = response.data;
-					metadata$1 = response.metadata;
+					metadata = response.metadata;
 				}
-				const output$1 = this.endpoint.outputSchema ? await this.endpoint.parseOutput(data) : void 0;
 				return {
-					output: output$1,
-					metadata: metadata$1,
+					output: this.endpoint.outputSchema ? await this.endpoint.parseOutput(data) : void 0,
+					metadata,
 					responseBuilder
 				};
 			};
-			if (rlsActive && rlsContext && baseDb) return (0, __geekmidas_db_rls.withRlsContext)(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: this.endpoint.rlsConfig?.prefix });
+			if (rlsActive && rlsContext && baseDb) return (0, _geekmidas_db_rls.withRlsContext)(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: this.endpoint.rlsConfig?.prefix });
 			return executeHandler(baseDb);
-		}, async (result$1, auditor) => {
+		}, async (result, auditor) => {
 			if (!audits?.length) return;
 			for (const audit of audits) {
-				if (audit.when && !audit.when(result$1.output)) continue;
-				const payload = audit.payload(result$1.output);
-				const entityId = audit.entityId?.(result$1.output);
+				if (audit.when && !audit.when(result.output)) continue;
+				const payload = audit.payload(result.output);
+				const entityId = audit.entityId?.(result.output);
 				auditor.audit(audit.type, payload, {
 					table: audit.table,
 					entityId
 				});
 			}
 		}, { db: rawDb });
-		const { output, metadata } = result;
 		const isJsonResponse = this.endpoint.responseType === "application/json";
 		const body = output === void 0 ? void 0 : isJsonResponse ? JSON.stringify(output) : typeof output === "string" ? output : String(output);
 		event.__response = output;
@@ -505,7 +488,7 @@ var AmazonApiGatewayEndpoint = class {
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		let chain = (0, __middy_core.default)(handler).use(this.logger()).use(this.error()).use(this.services()).use(this.input()).use(this.database()).use(this.session()).use(this.authorize()).use(this.events());
+		let chain = (0, _middy_core.default)(handler).use(this.logger()).use(this.error()).use(this.services()).use(this.input()).use(this.database()).use(this.session()).use(this.authorize()).use(this.events());
 		const telemetryMiddleware = this.telemetry();
 		if (telemetryMiddleware) chain = chain.use(telemetryMiddleware);
 		if (this.options.telescope?.middleware) chain = chain.use(this.options.telescope.middleware);
@@ -513,7 +496,7 @@ var AmazonApiGatewayEndpoint = class {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.endpoint.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
 				startTime
@@ -522,7 +505,6 @@ var AmazonApiGatewayEndpoint = class {
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 //#region src/endpoints/parseQueryParams.ts
 /**
@@ -543,10 +525,10 @@ function parseQueryParams(queryParams) {
 	}
 	return qs.default.parse(parts.join("&"));
 }
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayV1EndpointAdaptor.ts
 var AmazonApiGatewayV1Endpoint = class extends AmazonApiGatewayEndpoint {
+	endpoint;
 	getInput(e) {
 		const multiValueParams = e.multiValueQueryStringParameters || {};
 		const singleValueParams = e.queryStringParameters || {};
@@ -579,17 +561,16 @@ var AmazonApiGatewayV1Endpoint = class extends AmazonApiGatewayEndpoint {
 		this.endpoint = endpoint;
 	}
 };
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayV2EndpointAdaptor.ts
 var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
+	endpoint;
 	getCookies(e) {
 		return require_lazyAccessors.createApiGatewayCookies(e.cookies, e.headers?.cookie);
 	}
 	getInput(e) {
-		const raw = AmazonApiGatewayEndpoint.decodeBody(e.body, e.isBase64Encoded, e.headers?.["content-type"]);
 		return {
-			body: raw,
+			body: AmazonApiGatewayEndpoint.decodeBody(e.body, e.isBase64Encoded, e.headers?.["content-type"]),
 			query: qs.default.parse(e.rawQueryString),
 			params: e.pathParameters || {}
 		};
@@ -614,7 +595,6 @@ var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
 		this.endpoint = endpoint;
 	}
 };
-
 //#endregion
 //#region src/queue/AWSLambdaQueueAdaptor.ts
 /**
@@ -629,6 +609,8 @@ var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
 * retries only those records.
 */
 var AWSLambdaQueue = class {
+	envParser;
+	queue;
 	_services;
 	constructor(envParser, queue) {
 		this.envParser = envParser;
@@ -639,7 +621,7 @@ var AWSLambdaQueue = class {
 	}
 	async getServices() {
 		if (this._services) return this._services;
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+		const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
 		this._services = this.queue.services.length > 0 ? await serviceDiscovery.register(this.queue.services) : {};
 		return this._services;
 	}
@@ -698,29 +680,30 @@ var AWSLambdaQueue = class {
 				logger
 			});
 		} catch (error) {
-			logger.error((0, __geekmidas_errors.wrapError)(error), "Queue handler failed; retrying batch");
+			logger.error((0, _geekmidas_errors.wrapError)(error), "Queue handler failed; retrying batch");
 			for (const record of event.Records) if (!batchItemFailures.some((f) => f.itemIdentifier === record.messageId)) batchItemFailures.push({ itemIdentifier: record.messageId });
 		}
 		return { batchItemFailures };
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		return async (event, context) => {
+		return (async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.queue.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
 				startTime
 			}, () => handler(event, context));
-		};
+		});
 	}
 };
-
 //#endregion
 //#region src/subscribers/AWSLambdaSubscriberAdaptor.ts
 var AWSLambdaSubscriber = class {
+	envParser;
+	subscriber;
 	_logger;
 	_services;
 	constructor(envParser, subscriber) {
@@ -733,7 +716,7 @@ var AWSLambdaSubscriber = class {
 	}
 	async getServices() {
 		if (this._services) return this._services;
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+		const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
 		if (this.subscriber.services.length > 0) {
 			const registered = await serviceDiscovery.register(this.subscriber.services);
 			this._services = registered;
@@ -742,9 +725,8 @@ var AWSLambdaSubscriber = class {
 	}
 	error() {
 		return { onError: (req) => {
-			const logger = req.event?.logger || this.subscriber.logger;
-			logger.error(req.error || {}, "Error processing subscriber");
-			throw (0, __geekmidas_errors.wrapError)(req.error);
+			(req.event?.logger || this.subscriber.logger).error(req.error || {}, "Error processing subscriber");
+			throw (0, _geekmidas_errors.wrapError)(req.error);
 		} };
 	}
 	loggerMiddleware() {
@@ -767,7 +749,7 @@ var AWSLambdaSubscriber = class {
 	}
 	parseEvents() {
 		return { before: async (req) => {
-			const { logger,...e } = req.event;
+			const { logger, ...e } = req.event;
 			const rawEvent = e;
 			logger.info({ rawEvent });
 			const events = [];
@@ -869,12 +851,12 @@ var AWSLambdaSubscriber = class {
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		const chain = (0, __middy_core.default)(handler).use(this.loggerMiddleware()).use(this.parseEvents()).use(this.error()).use(this.services());
+		const chain = (0, _middy_core.default)(handler).use(this.loggerMiddleware()).use(this.parseEvents()).use(this.error()).use(this.services());
 		const wrappedHandler = async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.subscriber.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
 				startTime
@@ -883,7 +865,86 @@ var AWSLambdaSubscriber = class {
 		return wrappedHandler;
 	}
 };
-
+//#endregion
+//#region src/subscribers/SnsPushSubscriberAdaptor.ts
+/**
+* A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+* poller.
+*
+* The notification is handed to {@link AWSLambdaSubscriber} as the Lambda
+* event SNS would have invoked a function with, so the parsing, the services
+* and the error handling are the ones that run deployed on Lambda — the
+* endpoint is only a different way for the event to arrive.
+*/
+var SnsPushSubscriberAdaptor = class {
+	subscriber;
+	options;
+	lambda;
+	constructor(envParser, subscriber, options) {
+		this.subscriber = subscriber;
+		this.options = options;
+		this.lambda = new AWSLambdaSubscriber(envParser, subscriber);
+	}
+	async handle(body) {
+		const message = body;
+		if (typeof message?.Type !== "string" || !message.TopicArn) return refuse(400, "not an SNS message");
+		if (message.TopicArn !== this.options.topicArn) return refuse(403, `not subscribed to ${message.TopicArn}`);
+		if (this.options.verify) try {
+			await (0, _geekmidas_events_sns.verifySnsMessage)(message);
+		} catch (error) {
+			this.subscriber.logger.warn({
+				error,
+				topicArn: message.TopicArn
+			}, "Refused an SNS message that did not verify");
+			return refuse(403, error.name);
+		}
+		switch (message.Type) {
+			case "SubscriptionConfirmation":
+				await (0, _geekmidas_events_sns.confirmSnsSubscription)(this.options.emulatorEndpoint && message.SubscribeURL ? {
+					...message,
+					SubscribeURL: throughEndpoint(message.SubscribeURL, this.options.emulatorEndpoint)
+				} : message);
+				this.subscriber.logger.info({ topicArn: message.TopicArn }, "Confirmed SNS subscription");
+				return {
+					status: 200,
+					body: { status: "confirmed" }
+				};
+			case "Notification": try {
+				await this.lambda.handler((0, _geekmidas_events_sns.toSnsEvent)(message), {
+					awsRequestId: message.MessageId,
+					functionName: this.subscriber.topicName ?? "subscriber"
+				}, () => {});
+				return {
+					status: 200,
+					body: { status: "ok" }
+				};
+			} catch (error) {
+				return refuse(500, error.name);
+			}
+			default: return {
+				status: 200,
+				body: { status: "ignored" }
+			};
+		}
+	}
+};
+/** `url`, sent to `endpoint`'s origin instead of its own. */
+function throughEndpoint(url, endpoint) {
+	const target = new URL(url);
+	const origin = new URL(endpoint);
+	target.protocol = origin.protocol;
+	target.host = origin.host;
+	return target.toString();
+}
+function refuse(status, error) {
+	return {
+		status,
+		body: {
+			status: "refused",
+			error
+		}
+	};
+}
 //#endregion
 exports.AWSLambdaFunction = AWSLambdaFunction;
 exports.AWSLambdaQueue = AWSLambdaQueue;
@@ -891,4 +952,6 @@ exports.AWSLambdaSubscriber = AWSLambdaSubscriber;
 exports.AWSScheduledFunction = AWSScheduledFunction;
 exports.AmazonApiGatewayV1Endpoint = AmazonApiGatewayV1Endpoint;
 exports.AmazonApiGatewayV2Endpoint = AmazonApiGatewayV2Endpoint;
+exports.SnsPushSubscriberAdaptor = SnsPushSubscriberAdaptor;
+
 //# sourceMappingURL=aws.cjs.map